NULL Pointer Dereference in Avast and AVG Antivirus for Windows
CVE-2023-1587

5.8MEDIUM

Key Information:

Vendor

Avast

Status
Avast Antivirus
Avg Antivirus
Vendor
CVE Published:
19 April 2023

What is CVE-2023-1587?

Avast and AVG Antivirus for Windows were affected by a NULL pointer dereference vulnerability that could be exploited through the RPC interface. This flaw has been addressed in version 22.11, reinforcing the importance of keeping antivirus software updated to protect against potential threats.

Affected Version(s)

Avast Antivirus Windows 22.5 <= 22.10

AVG Antivirus Windows 22.5 <= 22.10

References

https://support.norton.com/sp/static/external/tools/secur...

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-1587 : NULL Pointer Dereference in Avast and AVG Antivirus for Windows